stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Unit 9 SYS8 Flashcards | StudBud
Explore
/
Unit 9 SYS8
Unit 9 SYS8
67 terms
·
StudBud Administration
·
8 plays
Imported from external platform
Flashcards
67 cards
F
Practice quiz
P
Host live
L
Questions
67
Answers
1
Is blocking process spawning a recommended application hardening technique?
True
False
2
What do security templates allow you to do?
Consistent settings
Fix software problem
Apply software patches
Multiple computer settings
3
What is the most likely cause of the user not receiving an Access-Accept or Access-Reject message?
Network connection is unstable
User entered wrong password
RADIUS server is down
User not in the server's database
4
How can you ensure the security of patient data during transfer using removable media devices?
Encrypt data on media
Install antivirus software
Implement strict password policy
Update OS and applications
5
What packet does the sender receive after sending a connection request to TCP port 25?
SYN
RST
ICMP Unreachable Port
ACK
6
Which type of site survey should be performed first?
Predictive
Passive
Ad hoc
Active
7
What is an attack that injects malicious scripts into web pages?
Drive-by download
DLL injection
XSS
SQL injection
8
What should you consider when strategically positioning wireless access points?
Disable the service set identifier (SSID)
Minimize interference from electronic devices
Control access to WAPs based on job roles
Position based on management preferences
9
What action disallows a connection silently?
Forward
Reject
Drop
Accept
10
Is a configuration baseline a collection of security settings that can be automatically applied to a device?
True
False
11
What should the client verify first when using SSL authentication?
Asymmetric keys
Server's certificate-validity period
Non-expiring certificate
Intranet DNS resolutions
12
What change should an IT company consider to improve its server's security?
Limit the privileges of each user on the server
Switch off the server whenever it is not in use
Continue to use the default settings but increase monitoring efforts
Ignore software and security patches and updates
13
What device would you use to perform a site survey?
Wireless access point
Wi-Fi analyzer
Heat map
Wireless interface
14
How should you control access to files on a file server used by the development department?
Share permissions and file screens
NTFS permissions and share permissions
Share permissions and quotas
NTFS permissions and file screens
15
Where would you configure a rule to allow external access to the HTTPS port?
Accept
Forward
Output
Input
16
What type of attack submits a longer stream of data than the input variable is designed to handle?
Smurf attack
Time-of-check to time-of-use attack
Buffer overflow attack
Data diddling
17
What could cause slow wireless network issues after a firmware update?
Disabled firewall
High Wi-Fi signal strength
Incorrect MAC filtering
Lack of testing
18
What benefits does an IPsec tunnel with IKE provide in a VPN setup?
Mutual authentication using SSL
Secure application-level connections
Protection at the packet level
Packet-level encryption with mutual authentication
19
What is an evil twin?
Obtains logon credentials
Sensitive information
Mimics a valid access point
Marks outside of buildings
20
Which command in Linux displays listening and non-listening sockets?
netstat -l
nexus -s
netsat -r
netstat -a
21
What is used to identify the network name in a wireless network?
Subnet mask
IP address
SSID
MAC address
22
What type of attack is executed when an attacker masquerades as the original device?
Bluesnarfing
Cloning
Relay
Disassociation
23
Which ports need to remain open for FTP file transfer?
21 and 20
21 and 80
20 and 443
23 and 443
24
How to completely disable access to a network for port security?
MAC filtering
Using a captive portal
Physically removing the patch cable
Implementing IEEE 802.1X
25
What is the BEST solution for application hardening?
Implement third-party application hardening tools
Use exception rules
Control access to executable files
Block process spawning
26
Where would you configure passwords for wireless network authentication?
On a RADIUS server
On the wireless access point
On the wireless access point and each device
On a certificate authority (CA)
27
What is the MOST effective strategy to improve server security?
Implement security baseline
Use simple passwords
Switch off security features
Enable all services
28
What is used to control access through a device?
Session filtering
Port number filtering
MAC address filtering
IP address filtering
29
How can you change directory permissions in Linux to provide limited access?
chmod 750
None of the above
chmod 755
chmod 777
30
What should a team do if a feature is too complex to complete in a sprint?
Continue working on the feature
Break the feature down
Move on to next feature
Drop the feature
31
What does bluesnarfing involve?
Sending electronic cards
Cloning a device
Viewing calendar and emails
Executing commands
32
Which application hardening technique is most effective in preventing attacks creating new processes?
Use exception rules
Block process spawning
Implement third-party application hardening tools
Monitor logs
33
What type of wireless access point is commonly used in a residential setting?
Bridge
WLC
SOHO
LWAP
34
What should you do to prevent unauthorized users from using AP configuration?
Change the administrative password
Isolate the AP from the client's wired network
Change the channel used by the AP's radio signal
Implement MAC address filtering
35
What action enhances browser privacy and prevents unauthorized access to company data?
Turning off Remember search and form history
Clearing the web browser cache
Disabling all browser add-ons
Blocking all pop-up windows
36
What should you do if unauthorized wireless access points are deployed within your organization?
Implement an intrusion prevention system (IPS)
Conduct a site survey
Check the MAC addresses of devices connected to your wired switch
Implement a network access control (NAC) solution
37
What type of RFID tag can send a signal over long distances?
Active
NFC
Passive
Bluetooth
38
What is the most effective method to protect logical ports?
Secure protocols
Service hardening
Software updates
Firewalls
39
What is the most effective method to control network traffic and detect attacks?
Strong password policy
Software and application updates
Host-based firewall and IPS
Penetration testing
40
How can you control internet access for hotel guests?
MAC address filtering
802.1x authentication
Captive portal
Pre-shared key authentication
41
Which action reduces the attack surface of a server?
Unused service removal
Anti-malware software
Patches and hotfixes installation
Host-based IDS
42
Which command shows all installed RPM packages?
apt list installed
rpm list installed
dnf list installed
yum list installed
43
What sends unsolicited business cards and messages to a Bluetooth device?
Slamming
Bluesnarfing
Bluebugging
Bluejacking
44
Which tools can be used to distribute and install software patches on Windows workstations?
WSUS
Security Templates
Configuration baseline
Security Configuration and Analysis
45
Is bluebugging a Bluetooth device that receives mobile phone commands?
True
False
46
Do switches and wireless access points use IP address filtering?
False
True
47
How can you mitigate the vulnerability to LDAP Injection attacks in an application?
Implement input validation
Switch authentication protocol
Enable SSL/TLS encryption
Disable client-side scripting
48
Which fuzz testing program type defines test data based on input models?
Code signing
Memory management
Mutation-based
Generation-based
49
Which command lists currently defined iptables rules?
iptables -F
iptables-save
iptables -L
iptables -A INPUT -j DROP
50
What type of security risk is it when an employee connects a wireless access point to the network against policy?
Physical security
Phishing
Rogue access point
On-path attack
51
Which tools allow remote management of servers?
FTP and SSL
FTP and SSH
Telnet and POP3
SSH and POP3
52
Where should the Wireless LAN controller be installed?
Network closet
Roof
Lobby
Manager's office
53
Can security templates apply new software patches?
True
False
54
Is the RADIUS server down?
False
True
55
What type of interference is caused by motors, heavy machinery, and fluorescent lights?
RFID
NFC
RFI
EMI
56
What is the first step in ensuring server security?
Apply baseline template
Install antivirus software
Enforce password policy
Connect to network
57
What is the most effective action to enhance browser privacy?
Clear browser cache
Restrict cookies
Disable add-ons
Incognito mode
58
What action should be taken to protect against CSRF attacks?
Implement CSRF token
Ignore the complaints
Advise users to change passwords
Implement CAPTCHA
59
What is a basic hardening guideline for applications?
Assume all applications are flawless
Grant administrative privileges
Update all applications
Allow unrestricted access
60
Wireless network interference is causing signal problems.
True
False
61
What is a configuration baseline?
Collection of security settings
Performance statistics
List of settings
Minimum server services
62
What type of attack occurs when an attacker inserts database commands into input fields?
Cross-site scripting
DLL injection
SQL injection
Buffer overflow
63
What are the two main causes of software vulnerabilities?
Design flaws and normalization
Fuzzing and obfuscation
Coding errors and design flaws
Obfuscation and normalization
64
What is the effect of the following iptables rules?
Allow SSH traffic
Allow SMTP traffic
Block SMTP traffic
Block SSH traffic
65
What type of attack is likely causing interference with your wireless network?
Cloning
Bluesnarfing
Jamming
Disassociation
66
Which components are part of a WPA2-Enterprise wireless network?
Open authentication
TKIP encryption
WEP encryption
802.1x
67
Which IPsec mode is more compatible with NAT?
Tunnel mode
Transport mode
